CVE-2025-15220 | SohuTV CacheCloud up to 3.2.0 LoginController.java init cross site scripting (Issue 379)

December 28, 2025 Yanac

A vulnerability classified as problematic was found in SohuTV CacheCloud up to 3.2.0. This affects the function init of the file src/main/java/com/sohu/cache/web/controller/LoginController.java. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2025-15220. The attack may be launched remotely. Furthermore, there is an exploit available.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More